Fixes from usage (#45)

Various fixes from usage on a project:
1. Load dynamic entrypoint when in dev mode to fix permissions issues on
linux
2. Install iproute2 to provide /usr/sbin/ip
3. Fix path to ip based on bookworm docker images
4. Move test stage in jenkins to match docker harness
5. Upgrade to alpine 3.18 for nginx (and track maintained version) as
CVE for curl not patched

_twig/docker-compose.yml/service/app.yml.twig

@@ -12,6 +12,7 @@ services:
 {% if @('app.build') == 'dynamic' %}
       target: node
     command: ["app", "start:dev"]
+    entrypoint: [/entrypoint.dynamic.sh]
     stdin_open: true # react-scripts start terminates if stdin closed
     volumes:
       - {{ (syncvolume) ? @('workspace.name') ~ '-sync:/app:nocopy' : ('./:/app' ~ @('docker.compose.host_volume_options')) }}

docker/image/app/Dockerfile.twig

@@ -3,6 +3,11 @@
 FROM console as node
 COPY .my127ws/docker/image/app/root-node /
 
+RUN apt-get update && apt-get install --no-install-recommends -y iproute2 \
+ && apt-get auto-remove -qq -y \
+ && apt-get clean \
+ && rm -rf /var/lib/apt/lists/*
+
 FROM {{ @('services.app.build.from.nginx') }} as nginx
 
 RUN apk add --no-cache jq

docker/image/app/root-node/entrypoint.sh

@@ -6,7 +6,7 @@ setup_app_networking()
     if [ "${HOST_OS_FAMILY}" = "linux" ]; then
         DOCKER_INTERNAL_HOST="host.docker.internal"
         if ! grep $DOCKER_INTERNAL_HOST /etc/hosts > /dev/null ; then
-            DOCKER_INTERNAL_IP=$(/sbin/ip route|awk '/default/ { print $3 }')
+            DOCKER_INTERNAL_IP=$(/usr/sbin/ip route|awk '/default/ { print $3 }')
             echo -e "$DOCKER_INTERNAL_IP    $DOCKER_INTERNAL_HOST" | tee -a /etc/hosts > /dev/null
         fi
     fi

harness/attributes/docker-spa.yml

@@ -7,7 +7,7 @@ attributes.default:
       build:
         from:
           node: = 'node:' ~ @('node.version') ~ '-slim'
-          nginx: nginx:1.25-alpine3.17
+          nginx: nginx:1.25-alpine
       environment:
         HOST_OS_FAMILY: = @('host.os')
       resources:
@@ -16,7 +16,7 @@ attributes.default:
       build:
         from: = 'node:' ~ @('node.version') ~ '-slim'
       publish: false
-  
+
   pipeline:
     base:
       ingresses: